Cisco Secure Email and Web Manager PrivEsc (cisco-sa-esa-sma-privesc-9DVkFpJ8)

Language:

Version 1.2 Mar 13, 2023, 2:01 PM CVSSv3 score source (set to "CVE-2023-20009") CVSS metrics ("CVSSv2 score" changed from "7.7" to "8.3". "CVSSv2 score" changed from "7.7" to "8.3". "CVSSv2 score" changed from "7.7" to "8.3". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N" to "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C". "CVSSv3 score" changed from "6.5" to "7.2". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N" to "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C". "CVSSv3 score" changed from "6.5" to "7.2". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N" to "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C". "CVSSv3 score" changed from "6.5" to "7.2". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N" to "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C") CVSSv3 severity (based on CVE-2023-20009, severity increased from "Medium" to "High") Plugin Feed: 202303131401
Version 1.1 Feb 24, 2023, 4:10 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202302241610
Version 1.0 Feb 22, 2023, 9:59 PM New Plugin Feed: 202302222159

* Changelogs are generally available for changes made after Nov 1, 2022